Controlling Access of end users on Categories and Activity versions

Dear All,
I am having end users who are having full access in learning Administrator for Creating Categories and Activity versions , Offerings and Classes in using Learning Administrator responsibility.
As per the business needs i need to create a new responsibility where end users can not create categories & Activity version but they can create only offerings & classes on selected Activity version.
your guide lines will be greatly appreciated.
Thanks & Regards,
Edited by: user1113648 on Apr 28, 2011 11:55 AM

Hi CDA
You're not understanding the way Discoverer works. The lowest level of security control that can be applied inside Discoverer is at the business area level. Thus if a user has access to any part of a business area then they have access to the whole business area. This is done by your administrator using TOOLS | SECURITY from the Administration menu bar.
The privileges that can be set using TOOLS | PRIVILEGES control what a user can do with the data that they have access to (remember that access itself is at the business area). Thus if a user has the Create / Edit workbook privilege and they have access to two business areas then they have that privilege for both business areas and create or edit workbooks to their heart's content in both of them.
Further, and I think this is where you may be getting confused, you have to understand that an end user cannot grant the privilege for another end user to have access to their business area simply by sharing a workbook. The act of sharing a workbook does not share the access rights. In order for one user, aka the Registrar, to be able to run a workbook that was created by another user, aka the HR director), the Registrar must already have been granted access to the HR business areas by the Discoverer administrator. If a user does not have access to a business area but does have access to a workbook from that business area then they will not be able to execute the workbook.
It therefore sounds like you do not have security under control.
Best wishes
Michael
BTW: Are you using the SunGard Banner system by any chance, and are you using the ODS? If this is the case, you may be interested in knowing that my company has partnered with SunGard Higher Education to bring Discoverer training and consulting to their customers.

Similar Messages

  • How do I access the End User Licensing Agreement? I clicked on it and it gives me a message that I need to launch Adobe Reader, accept and close and reopen. Trouble is I can't get to an icon for file to launch. I am working on a Mac and have installed Mac

    I am using a Mac and have installed Adobe Reader for Mac, latest version. I cannot access the End User Licensing Agreement. I clicked on it and it gives me a message that I must launch Adobe, check that I agree, close and reopen. The problem is I can't find any way to launch Adobe because it appears nowhere on my launch pad, nor in my document files or on the control panel. Because of this, I cannot print bank statements nor can I get into my insurance companies billing department to make a payment. HELP!

    How about in your Applications folder?

  • How do i launch Adobe Reader,accept the end user agreement,quit,and relaunch the browser?

    How do i launch Adobe Reader.accept the end user agreement,quit,and relaunch the browser?

    Find the Reader application (same place as all your other apps. Not sure where that is since we don't know your OS) and launch it.

  • Controlling access of Plus users to other Business Areas

    We are starting to roll out Discoverer Plus/Viewer on our campus. The following scenario concerns us. We give the Registrar the create/edit query privilege in the administrator, and he works in the REGISTRAR business area. The HR director, who works in the HR business area, decides to build a workbook with a nice report about student employees which she shares with the Registrar. Since the create/edit privilege seems to be associated with the user (Registrar), when he opens the workbook he also has access to the rest of the HR business area, by creating a new sheet and grabbing items from anywhere in the HR business area.
    We had hoped to have something that worked more like this. Power users could create interesting workbooks and share them across campus to folks in other areas, and only be sharing the contents of the sheets themselves. It appears that they would also be sharing their entire business area with any other Power User (someone with create/edit query privilege). In other words, we want some users to be Power Users in their own business area and just a Viewer in any other BA.
    Are we missing something? If not, then why isn't the create/edit query privilege associated with a business area? How can an organization with multiple business areas use the workbook sharing facility without compromising BA data?
    Thanks.

    Hi CDA
    You're not understanding the way Discoverer works. The lowest level of security control that can be applied inside Discoverer is at the business area level. Thus if a user has access to any part of a business area then they have access to the whole business area. This is done by your administrator using TOOLS | SECURITY from the Administration menu bar.
    The privileges that can be set using TOOLS | PRIVILEGES control what a user can do with the data that they have access to (remember that access itself is at the business area). Thus if a user has the Create / Edit workbook privilege and they have access to two business areas then they have that privilege for both business areas and create or edit workbooks to their heart's content in both of them.
    Further, and I think this is where you may be getting confused, you have to understand that an end user cannot grant the privilege for another end user to have access to their business area simply by sharing a workbook. The act of sharing a workbook does not share the access rights. In order for one user, aka the Registrar, to be able to run a workbook that was created by another user, aka the HR director), the Registrar must already have been granted access to the HR business areas by the Discoverer administrator. If a user does not have access to a business area but does have access to a workbook from that business area then they will not be able to execute the workbook.
    It therefore sounds like you do not have security under control.
    Best wishes
    Michael
    BTW: Are you using the SunGard Banner system by any chance, and are you using the ODS? If this is the case, you may be interested in knowing that my company has partnered with SunGard Higher Education to bring Discoverer training and consulting to their customers.

  • Enabling end users to create and upload their own layouts for PDF reports

    Using the PDF printing features in APEX 3.x and BI Publisher, you can create professional looking report designs with no programming knowledge, simply by using the built-in wizards of the BI Publisher Word Plug-In, and a little knowledge of how to use MS Word. The nice thing about using the Word Plug-In is that even the end users of your APEX applications could potentially do this. The only problem is, that typically those report layouts are stored under the Shared Components of your application, and end users generally don't have access to the Application Builder, all they typically use is your APEX application. So then why not simply add an interface to your APEX application that lets your end users upload their own layouts and dynamically link them to APEX report queries at runtime? I put together a sample application that demonstrates this technique, you can try it out on apex.oracle.com or download the application and try it on your own APEX instance. Here's the link to my Blog with more information:
    http://marcsewtz.blogspot.com/2008/05/enabling-end-users-to-create-their-own.html
    Regards,
    Marc

    Hi Marc,
    Very nice app. I tried to create a new template with success.
    Regards,
    Dimitri
    -- http://dgielis.blogspot.com/
    -- http://apex-evangelists.com/
    -- http://apexblogs.info/

  • What is the tool to be accessed by End user in version 7

    Hi all,
    Could any body give a good ppt or explanation about the way the end users can access the BW Queries in version 7.
    Priror to version 7 we used to give access to Browser to the end users . Now what are the different options with EP and with out EP for that.
    With rgds,
    Anil Kumar Sharma .P

    hi Anil,
    in version 7, Portal is a must to run web templates, and the new bex tools WAD, query designer, report designer, bex web analyzer all will need Portal (and Java usage type), you can still use old 3.x bex tools and have the 3.x webtemplates run on bw's WAS.
    check Prakash's ppt 'publishing strategies'
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/70e18305-2356-2910-4bbe-9c1ebd751032
    and
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a5067965-0901-0010-6f8a-bbf0b7424283
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/6fe0f064-0901-0010-d4b2-86ac9f952cc2
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/5f243d6d-0601-0010-2aae-abe0a4dcfadb
    hope this helps.

  • Disable Query Builder Tool access to end users

    Hi,
    Did any of you block the Query Builder Tool access to your end users?
    In our Netweaver 2004s BI implementation, we have a special need to restric the access to Query Builder Tool. Mostly our users are using BEx Analyzer tool (Front end service pack- SP12). Any ideas in this regards would be highly appreciated? Of course I can restrict access on the back end that our end user is only able to read the Query. What I am looking what is, how to stop the user even from launching Query Builder tool?
    Thanks
    Jay Lakshmanan

    Hi Altera,
    If the role doesnt give access to transaction RRMX and if none of the Reporting Auth Objects (S_RS_COMP, S_RS_COMP1, S_RS_FOLD)  exists, than the user will not have access to Query Builder.
    Hope it helps.
    Please award points if it is useful.
    Thanks & Regards,
    Santosh

  • BI Webtemplate access to End user.

    Dear All,
    My BI team asked me the answer for this scenario. They have to give the webtemplate (created/executed by BI) URL to end user access. Please advise me what are all the access need for end user. What kind of the access we have to give to the end user and tell me about configuration part of the BASIS consultant.
    Thanks for your help.
    Regards,
    Senthil Kumar.C

    Prabodh wrote:
    You should always state the Apex version. And this case, because this is related to authentication, the Authentication scheme you are using.
    Assuming that you are using the Apex Built-in Auth scheme, you can achieve this by using User Groups feature and the APEX_UTIL.CURRENT_USER_IN_GROUP API.
    Here are the high level steps:
    a. Apex Builder > Administration > Manage Users and Groups
    b. Create 2 users UAT1 and UAT2
    c. Create 2 Groups UAT1Group and UAT2 Group
    d. Assign UAT1 user to UAT1Group and UAT2 to UAT2Group
    e. On the Home page of both the applications create a "Before Page Header" Branch that goes back to the Login Page. Make this branch conditional.This does not work, because in APEX you can go into any page after login bypassing the home page (like this http://apex.oracle.com/pls/apex/f?p=46417:9 where 9 is not home page)
    So this branch will not run.
    f. In "A" application you want only UAT1 to access , so use PL/SQL Expression type of condition in the above created branch that has the following code
    return NOT APEX_UTIL.CURRENT_USER_IN_GROUP('UAT1Group')So the user UAT1 will return False and the branch will not execute, but for others it will return True and send the user to Login page, which is access denied.
    Similarly, make the branch in B application condition for UAT2Group.
    Regards,

  • Customise EOP Spam Notification End-User email address and email content

    Hi
    We are using EOP with our on-premise Exchange 2010 environment. 
    I am rolling out EOP and have the following two (simple) questions, regarding the Spam Notification email that is sent to end-users:
    1. Can we edit the email address that sends the Quarantine notification email? Or must the email come from [email protected]
    2. Can we customise the Quarantine email that is sent to the End-user (with our company logo)?
    From my experience and understanding, I believe the answer for both is NO, but my customer is adamant that editing the email address and customising the email content is possible.. Please advise.
    Thanks
    Ron

    The safelist/blocklist is tied to one email address. However, if you enable email alias consolidation done by LDAP and leveraging off of the Active Directory, then you may be able to achieve what you want.
    The safelist/blocklist comes into play with respect to anti-spam results. The email alias consolidation should occur much earlier.
    So, see if you can get email alias consolidation using LDAP/Active Directory working and it should address the safelist/blocklist thing.

  • DMS-KM connector and active version in DMS

    I was wondering if it possible to bring back only the active version of a document using the DMS connector?? We created a varient but do not see anywhere to specify that we only want to Active version to be returned... so for each document we get every version...
    Cheers,
    Derek

    Hi Derek,
    if this is not a configuration option in the DMS repository manager, does it at least return a KM property for "active=yes/no" or similar?
    If it does that, you could implement your own repository filter on that basis or access the DMS resources via query-based taxonomies that either do or do not allow certain values for that property.
    Regards,
    Karsten

  • Query Builder access for end users

    Hi,
    I have a group of users who would like to have 'Query Builder' access.
    Is it possible to directly access query builder without actually login-in into application builder.
    Thanks in advance
    Aali

    No, but you could build a form to mimic it... Check out this thread from a few days ago: Query Builder functionality
    Thank you,
    Tony Miller
    Webster, TX
    On the road of life...There are 'windshields', and there are 'bugs'
    (splat!)
    "Squeegees Wanted"
    If this question is answered, please mark the thread as closed and assign points where earned..

  • Where do I download and activation version of Adobe Acrobat 7.0 professional?

    I have Adobe Acrobat 7.0 Professional.  When I am at the download site for activation I only see Acrobat 7.0 Standard and 8.0 Professional. 

    Kglad,
    Thank you for your answer.  However, when I follow the link in the instructions for the English version, it brings me to this URL. http://www.adobe.com/cfusion/entitlement/index.cfm?e=cs2%5Fdownloads.  The list of downloads does not include Acrobat Pro 7.0 When I download, this is the Acrobat Standard version, as titled.

  • END USER accessing only the Output of report

    Hi,
    I'm creating reports based on queries, right now we are planning to give view access to end users, but my doubt if end user hits view on the report the query runs everytime and produces the report, what I want to achieve is that the we schedule the report before night and end user will only view the PDF output the query produces by the scheduling, How can I achieve this?

    So do we need to give the user access to schedule button as well? and Do you mean run report online option?
    Any update please?
    Edited by: user8937215 on Aug 5, 2010 7:55 AM
    E

  • I have a apple computer,I downloaded adobe reader and acrobat, but now it ask for a end user license

    I have an apple computer, I have downloaded adobe reader and acrobat, but now I am asked the following,Before viewing PDF documents in this browser you must launch adobe reader and accept the End User License Agreement and relaunch browser<<<<<<But how you accept the end user license, when you can not even find the agree button

    airplane wrote:
    Before viewing PDF documents in this browser you must launch adobe reader and accept the End User License Agreement and relaunch browser
    Did you do that: launch the standalone Reader (not the browser plugin) and accept the EULA?

  • I tried to download a form from my doctor's office and got a message that I had to install adobe reader, accept the end-user agreement agreement, quit and relaunch. I did all that to my best understanding of those words but still saw nothing but the same

    I tried to download a form from my doctor's office and got a message that I had to install adobe reader, accept the end-user agreement, quit and relaunch. I did all that, to my understanding of those words which could be wrong, but still have the same message. Please help.

    The key word is "launch", the Apple word for "run an app". You must run an app from Applications

Maybe you are looking for